CASB investigate may not list a cloud service user for some activity.
Activity for public repository may not report a cloud service user as no user check is performed by Github. For private repos the cloud service user maybe listed as the CloudSOC user or even a userid vs the email address.
For the Github CLI there may not be a Cloud service user provided as the CLI does not send the user.